Social Compliance Audits in China: BSCI, SEDEX, SA8000

A social compliance audit in China checks whether a factory treats its workers fairly and keeps its workplace safe, measured against a written code. Three names dominate this space: amfori BSCI, Sedex/SMETA, and SA8000. If your buyers are asking for one of them, the choice of which is usually made by your customers, not by you: European retail brands tend to require BSCI, Sedex/SMETA is the shareable audit accepted across UK and global supply chains, and SA8000 is the only one of the three that is an actual certification. This guide explains each standard, how a BSCI audit in China works on the ground, how to read the report, and what happens after a poor result.

Most importers meet these standards when a buyer's compliance team sends a questionnaire or asks for an audit report number. Then the work is practical: documents in order, conditions on the factory floor, and someone coordinating the audit itself. A sourcing agent like CN Ally can run that coordination, from checking whether a factory is already audited to arranging a pre-audit review before the real auditors arrive.

Which standard do your buyers actually require?

Start here, because it decides everything else. The three schemes look similar from a distance but answer different questions.

amfori BSCI · Sedex/SMETA · SA8000

• Run by: amfori, a business association · Sedex, a membership platform · Social Accountability International (SAI)
• What it is: An audit programme against a code of conduct · An audit methodology whose reports are shared on the Sedex platform · A certifiable management-system standard
• Is it a certificate?: No · No · Yes
• Scope: 13 performance areas · 2-pillar or 4-pillar modules · 9 elements including a management system
• Result format: Rating from A to E · List of non-compliances plus a corrective action plan · Certified or not certified
• Typically asked for by: European retailers and brands · UK and global buyers across industries · Buyers who want formal certification
• How it gets started: An amfori member authorises the audit · A Sedex member buyer requests it, or the factory arranges one via an approved audit firm · The supplier applies to an accredited certification body
• Where the report lives: The amfori platform · The Sedex platform · The certification body's register

The common misunderstanding is treating all three as interchangeable "social certificates." Only SA8000 issues a certificate. BSCI and SMETA produce audit reports that buyers read and share. Buyers' compliance teams know the difference, so use the right word: a factory is "BSCI audited," not "BSCI certified."

For the wider picture, see supplier audit types explained and what factory audits in China cover.

amfori BSCI: the European retail standard

BSCI stands for Business Social Compliance Initiative. It was set up in 2003 by the Foreign Trade Association, the European importers' association now known as amfori, and its code of conduct is built on International Labour Organisation standards, the UN human rights framework, and national law. European buyers request them most often, and one audit can satisfy several buyers at once, which is the main reason factories agree to them.

The audit measures a factory against 13 performance areas:

1. The social management system and cascade effect
2. Workers' involvement and protection
3. The rights of freedom of association and collective bargaining
4. No discrimination, violence, or harassment
5. Fair remuneration
6. Decent working hours
7. Occupational health and safety
8. No child labour
9. Special protection for young workers
10. No precarious employment
11. No bonded or forced labour, or human trafficking
12. Protection of the environment
13. Ethical business behaviour

Auditing firms such as SGS document the full scheme. Behind the 13 areas sit 81 audit questions, 20 of them classed as crucial, which carry extra weight in the rating. The overall rating is not decided by the auditor on the day; it is calculated by the amfori platform from the ratings of the 13 performance areas. So the closing meeting covers findings, not a grade; the letter arrives with the report.

The ratings work like this:

Rating · Meaning · How it is reached

• A: Very good · At least 7 performance areas rated A, none rated C, D, or E
• B: Good · At most 3 areas rated C, none rated D or E
• C: Acceptable · At most 2 areas rated D, none rated E; the factory must produce a remediation plan within 60 days
• D: Insufficient · Up to 6 areas rated E
• E: Unacceptable · 7 or more areas rated E

A full BSCI audit covers all 13 areas and repeats every two years; follow-up audits in between examine only the areas needing new evidence. Audits can be announced, semi-announced (the common format: a one-month window with no exact date), or unannounced.

Nothing happens without a member: an amfori member must link the factory to itself on the platform (the RSP link) and authorise the audit to a chosen firm. Each factory carries a unique DBID number. If a supplier claims to be "in the BSCI system" but cannot produce one, treat that as a red flag.

Sedex and SMETA: the shared audit

Sedex, the Supplier Ethical Data Exchange, is a membership platform where audit reports are stored and shared between buyers and suppliers. SMETA, the Sedex Members Ethical Trade Audit, is the audit methodology itself. A factory undergoes one SMETA audit and shares the report with every Sedex member buyer, which is why suppliers often prefer it: one audit, many customers.

SMETA audits come in two scopes:

2-pillar · 4-pillar

• Modules: Labour Standards and Health & Safety, plus management systems, entitlement to work, subcontracting, homeworking, and a simplified environment review · Everything in 2-pillar, plus a full Environment assessment and a Business Ethics module
• What rules it: The ETI Base Code · The ETI Base Code plus Sedex's environment and ethics pillars
• Typical on-site time: Around 2 days · 3 days or more
• Who usually asks for it: Buyers checking labour and safety basics · Buyers with full sustainability programmes

The pillar breakdown above follows V-Trust's SMETA 2-pillar vs 4-pillar checklist.

Two facts matter here. First, only Sedex Affiliate Audit Companies — firms such as SGS, Intertek, Bureau Veritas, TÜV SÜD, QIMA, and BSI — may carry out a SMETA audit. A "SMETA-style" audit from anyone else will not be accepted on the platform. Second, like BSCI, SMETA is not a certification: no pass or fail, no certificate, just a list of non-compliances and a corrective action plan (CAPR) for members to read on Sedex.

SA8000: the actual certification

SA8000 is different in kind. Created in 1997 by Social Accountability International, a multi-stakeholder standard-setting organisation, it is a voluntary certification standard grounded in the Universal Declaration of Human Rights and ILO conventions. A factory's compliance is certified by an accredited third-party certification body, and the certificate is aimed at brands and purchasers, not consumers: it cannot be printed on packaging or labels.

The standard measures nine elements:

1. Child labour
2. Forced or compulsory labour
3. Health and safety
4. Freedom of association and right to collective bargaining
5. Discrimination
6. Disciplinary practices
7. Working hours
8. Remuneration
9. Management system

The ninth element is the heaviest lift: a documented management system that keeps the other eight in force continuously — policies, procedures, records, accountability — rather than cleaning up for audit week. Certification is the most expensive path: the factory pays an accredited body for the initial audit and the surveillance that keeps the certificate valid. Some buyers ask for SA8000 specifically because a certificate is simpler to file than a report — but for most factories, the audit their buyer asked for is the practical starting point.

What a social audit day looks like in a Chinese factory

Whatever the scheme, the on-site sequence is similar. A BSCI or SMETA audit in China usually takes one to three days depending on factory size and scope. Expect this shape:

Opening meeting. The auditor explains the scope and method; management presents the company profile, organisation chart, and policies.

Document review. This is where auditors spend the most time: payroll records and time cards are cross-checked, because reported hours and paid wages have to agree. Employment contracts, social insurance records, safety logs, training records, and grievance procedures are all pulled. In China, expect the auditor to dig into overtime records and wage calculations in particular.

Site tour. The production floor, warehouse, dormitories if provided, canteen, and common areas. The auditor checks fire exits (clear, marked, unlocked), fire extinguishers with current inspection tags, personal protective equipment in use, first aid kits, machine guards, chemical storage, and sanitation. Photos are taken throughout.

Worker interviews. The auditor, not management, chooses a sample of workers and interviews them confidentially, with no managers present. Questions cover hours, wages, overtime, treatment by supervisors, safety, and grievance handling — the reality check on the documents.

Closing meeting. The auditor presents preliminary findings, management responds, and a corrective action plan is discussed for each finding. The written report follows within two to four weeks; for BSCI it lands on the amfori platform with the calculated rating.

One China-specific note from BSCI's own producer materials: prison labour in China is not covered by Chinese labour law, since prisoners' rights fall under prison rules rather than employment law, so BSCI advises members not to engage with business partners that use it.

How to read the audit results

BSCI. A or B means the factory maintains its improvement process without a forced follow-up. C is acceptable but triggers a remediation plan within 60 days and a follow-up audit. D and E mean serious gaps; most buyers require a re-audit after remediation, and some pause orders. Ask to see the area-level breakdown, not just the letter: a B with three C-rated areas tells a different story from a B with none.

SMETA. Read the corrective action plan, not a score. Non-compliances are graded by severity: child labour, forced labour, and life-safety failures such as locked fire exits or missing guards can sink a supplier relationship on their own. Also check the auditor's firm against the Affiliate Audit Company list; a report from an unlisted firm is worthless on Sedex.

SA8000. The question is binary: certified or not, and if certified, by which accredited body and until when. Verify the certificate with the issuing body rather than trusting a PDF.

Across all three, read the previous audit too. A factory that moved from D to B is demonstrating a working management system; one that has sat at C for three cycles is demonstrating the opposite.

After the audit: remediation and follow-ups

A poor result starts a process, not the end of a relationship. The factory drafts a corrective action plan for each finding, with owners and deadlines. The 60-day window for a BSCI C rating is typical of the pace buyers expect: fast enough to show intent, long enough for real fixes like installing guards, rewriting overtime policy, or back-paying wages.

Be realistic about what remediation costs the factory. Physical fixes (extinguishers, signage, machine guards) are cheap; the expensive items are systemic. Bringing hours within legal limits can mean hiring more workers, and proper social insurance contributions change the cost base. If your pricing depends on a factory that is currently non-compliant on hours and wages, full compliance may move your unit price — price honestly rather than avoiding audited factories.

Follow-up audits re-examine only the previously failed areas in a BSCI follow-up. If the factory cannot or will not remediate, buyers walk away — the mechanism that gives these schemes their teeth. A sourcing agent on the ground can verify remediation with photos, payroll samples, and worker interviews before you pay for a re-audit.

Costs, scheduling, and who pays

Nobody publishes a price list for social audits; any article quoting exact figures is guessing. What is stable: the audited factory usually pays, the firm quotes per engagement, and pricing runs on man-days that scale with factory size and headcount. Get quotes from two or three approved firms and compare the man-day estimate, not just the headline number.

Scheduling takes longer than the audit: allow several weeks from decision to on-site day for booking, the self-assessment questionnaire, document preparation, and the auditor's calendar, plus a few more for the report. Semi-announced BSCI audits are deliberate — the factory knows the month, not the date. If a factory asks you to help it "prepare" by coaching workers on interview answers, that tells you what its results are worth.

Which audit should you pursue? A decision rule

Work backwards from the requirement:

• A buyer named a standard. Pursue exactly that one. Do not substitute BSCI for a SMETA request or vice versa; compliance teams file by name.
• No buyer has named one, and you sell to European retail. A BSCI audit is the most widely recognised baseline.
• No buyer has named one, and you sell through UK or global supply chains. A 2-pillar SMETA audit is the minimum credible option; choose 4-pillar if your buyers talk about sustainability rather than just labour.
• You want a certificate on file, not just a report. SA8000, through an accredited body, is the only one of the three that certifies.

When choosing between factories rather than standards, the audit history matters more than the scheme: a recent B rating with a closed corrective action plan beats a five-year-old SA8000 brochure with nothing since. Verify every claim on the platform or with the issuing body, and treat any audit document a supplier emails you as a starting point, not proof. Coordinating this from another continent is exactly what a China sourcing agent is for — our factory audit service covers social compliance alongside the operational audit (hi@cnally.com).

Frequently asked questions

Is BSCI a certification?

No. BSCI is an audit programme: the factory receives a report with an A-to-E rating, but no certificate is issued. A "BSCI certificate" is not a real BSCI document. SA8000 is the certification among the three.

What is the difference between a BSCI audit and a SEDEX/SMETA audit?

BSCI is run by amfori and audits a factory against a 13-area code of conduct, producing an A-to-E rating stored on the amfori platform. SMETA is an audit methodology used on the Sedex platform; it comes in 2-pillar (labour standards, health and safety) and 4-pillar (adds environment and business ethics) versions and produces a list of non-compliances with a corrective action plan instead of a rating. Some buyers accept either, but many specify one by name, so check before booking.

How long does a social compliance audit take in China?

One to three days on site, depending on factory size and scope — a 2-pillar SMETA is typically around two days, a 4-pillar three or more. The full process takes longer: several weeks for booking, preparation, and the self-assessment questionnaire, plus two to four weeks for the written report.

How much does a BSCI or SMETA audit cost?

The schemes do not publish prices. Audits are usually paid for by the audited factory and quoted per engagement by the auditing firm, priced on man-days that scale with factory size and worker headcount. Get quotes from two or three approved firms and compare the man-day estimate behind the price.

What happens if a factory fails a social audit?

There is no formal "fail" in BSCI or SMETA, but low ratings and critical non-compliances have consequences. A BSCI C rating requires a remediation plan within 60 days and a follow-up audit. Critical findings such as child labour, forced labour, or locked fire exits can lead buyers to pause or cancel orders until remediation is verified. The factory fixes each finding, documents the correction, and undergoes a follow-up audit on the failed areas.

Can one audit satisfy both BSCI and Sedex buyers?

Sometimes. A factory with a current BSCI report and a current SMETA report on Sedex covers both audiences, but one does not automatically substitute for the other. Some buyers accept either standard's report; many specify exactly which one they want. Confirm with each buyer's compliance team before assuming a single audit is enough.